Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694D9E40F34411EFB4FA898D762E951A.roa
File: 694D9E40F34411EFB4FA898D762E951A.roa (raw, json)
Hash identifier: ospPBcDbC46W1YvP2p7qn3bG6ABuZtnq0RR9aMOqvcc=
Subject key identifier: 38:95:6F:33:3D:33:A9:88:15:0E:9D:A9:C6:20:43:AA:87:5D:E7:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 012D8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694D9E40F34411EFB4FA898D762E951A.roa
Signing time: Tue 25 Feb 2025 06:47:42 +0000
ROA not before: Tue 25 Feb 2025 06:47:38 +0000
ROA not after: Sat 19 Feb 2028 06:47:38 +0000
asID: 17561
IP address blocks: 156.249.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77198 (0x12d8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 25 06:47:38 2025 GMT
Not After : Feb 19 06:47:38 2028 GMT
Subject: CN=67bd678e-d840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:a7:ab:fd:5c:49:64:04:63:b4:a3:80:49:
02:d5:cc:ca:01:3b:b4:21:3a:b1:01:fb:89:1b:2a:
0c:05:34:df:a8:d4:87:71:27:7c:df:40:d3:a3:5c:
b8:07:09:a7:8d:f1:3a:a6:71:14:5b:48:8f:ef:75:
f6:d2:87:ae:21:ba:d3:7d:41:9f:2b:60:af:fa:42:
95:7b:8d:0f:dc:f1:e0:61:23:ba:ea:21:f2:1d:3b:
9a:24:e1:f2:61:e8:ba:0a:0c:62:67:15:08:e7:97:
1b:97:5d:d9:f3:41:e4:1a:c4:45:c5:90:3d:21:6c:
bf:af:7a:50:f5:75:63:d1:26:fd:b1:c8:a6:e7:8e:
84:5f:d0:40:e3:7d:20:53:f9:40:cf:fc:bf:2b:1c:
c5:fd:f4:82:4c:73:77:df:e5:a7:c6:f9:66:63:82:
a6:9b:f1:82:4e:dc:55:9f:4c:f6:a6:15:e0:23:e4:
ba:c5:c9:51:70:0b:6d:af:7d:3f:6f:ce:64:6f:d9:
a0:3b:54:48:71:a3:08:c6:18:03:8e:03:ca:13:e3:
f6:4b:c3:45:ab:fe:8c:f5:2f:21:97:5d:4f:30:0f:
1e:78:39:ba:f3:71:c8:6e:a6:96:cd:7c:2d:31:8c:
fb:76:d7:05:17:e9:8f:d4:f0:f5:be:56:ed:1c:78:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:6F:33:3D:33:A9:88:15:0E:9D:A9:C6:20:43:AA:87:5D:E7:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694D9E40F34411EFB4FA898D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.210.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:69:18:d2:10:fa:bd:d6:69:f1:69:24:23:28:bf:03:cb:
09:c2:0a:d0:7c:dc:ad:55:fe:d6:af:40:73:52:4b:98:d8:50:
36:f1:f1:35:75:63:06:00:27:e5:ec:b5:ee:09:60:f4:c6:b9:
e2:be:a0:90:4a:b5:9b:9e:64:ec:2a:7f:64:a6:92:1d:a7:d1:
5a:ff:51:5b:3a:e9:fc:7e:91:97:1b:0c:4b:e6:b5:2f:63:ba:
68:65:4f:ec:e0:30:50:73:68:c6:88:83:79:c8:a2:a6:f1:1a:
2d:3f:99:d9:18:0c:a0:8a:8f:2a:ea:5f:59:aa:75:53:8b:11:
c0:e2:33:02:3d:c6:3a:7d:a6:7c:43:bb:7a:0d:34:7f:6c:9b:
8c:78:ad:16:34:40:98:7a:4f:0d:73:db:d3:f1:85:7e:2a:65:
0b:eb:e5:f4:51:1a:d0:71:f5:f7:23:93:09:6b:c1:45:02:ef:
19:78:a6:0f:bf:7c:9c:0a:9d:91:a6:98:2f:0e:35:8d:9a:32:
18:57:80:e7:77:91:7d:0b:29:e1:c5:9c:95:e3:f5:a8:58:a1:
b2:47:a9:12:19:d1:94:44:61:a8:55:98:5d:9b:19:f8:64:b5:
85:12:12:0e:37:71:b2:4b:47:82:13:5f:2e:40:4c:de:d6:8f:
8d:78:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:02 2025 by rpki-client